This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa
File:                     3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (raw, json)
Hash identifier:          vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=
Subject key identifier:   B0:28:75:06:40:9A:55:E3:05:0C:25:13:AC:BF:AA:F5:B9:59:0A:A4
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       43E285731AB1BB7258A191800A76FBA2C70A6AFF
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa
Signing time:             Tue 02 Dec 2025 08:00:01 +0000
ROA not before:           Tue 02 Dec 2025 07:55:01 +0000
ROA not after:            Tue 01 Dec 2026 08:00:01 +0000
asID:                     142311
IP address blocks:        103.168.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 09:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e2:85:73:1a:b1:bb:72:58:a1:91:80:0a:76:fb:a2:c7:0a:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Dec  2 07:55:01 2025 GMT
            Not After : Dec  1 08:00:01 2026 GMT
        Subject: CN=B0287506409A55E3050C2513ACBFAAF5B9590AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:7b:6d:0c:d7:34:a0:c6:1d:17:9b:e1:7c:
                    8a:00:4f:66:b1:00:c8:08:c8:79:30:75:c4:65:0e:
                    b7:88:6b:8e:86:bc:84:f8:03:41:b0:e3:e2:df:2d:
                    f1:11:6e:f0:9c:94:9f:61:f7:b3:d5:84:9e:03:23:
                    61:08:35:e0:71:66:15:92:71:de:12:83:9e:52:af:
                    b5:4d:0b:94:27:3b:92:15:78:75:9f:04:a6:ac:a4:
                    eb:e9:8f:8b:91:a1:67:34:24:81:54:1c:18:d8:b3:
                    dc:d1:b8:45:a1:ad:1d:d6:ef:81:3e:2b:66:d4:05:
                    9f:da:27:bb:26:17:6c:36:87:eb:b5:02:c3:ca:ae:
                    77:fe:4f:2d:b5:5a:c8:2c:6d:54:6b:8c:db:ca:c0:
                    84:e5:92:eb:21:08:38:66:ed:71:96:4d:ef:2f:e4:
                    f1:08:b4:5a:f0:98:4a:00:6f:dd:ab:26:4f:d9:f3:
                    84:60:e2:f2:b4:c8:5d:38:a6:ac:dd:9c:71:24:24:
                    d2:11:c8:69:ba:4d:8a:37:bb:42:69:de:94:9d:86:
                    bf:db:4d:84:e9:c2:f9:16:43:00:c0:f2:95:8a:cc:
                    d8:62:9e:91:75:66:5a:c3:35:fa:10:11:dc:dd:dd:
                    29:78:32:ea:43:f0:7f:69:57:60:3e:ee:37:61:c4:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:75:06:40:9A:55:E3:05:0C:25:13:AC:BF:AA:F5:B9:59:0A:A4
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:22:b0:e5:03:7e:cf:1c:de:c6:2d:76:fe:fe:96:6a:86:bd:
         bd:43:6d:82:50:b5:66:7b:89:54:db:1d:bb:f4:57:20:61:d8:
         58:f3:60:4c:f0:e3:8c:17:79:86:58:38:8b:dd:fb:e6:c8:35:
         ba:fa:62:8d:92:55:43:da:fa:07:56:69:71:18:5c:56:2a:22:
         1e:54:16:9f:06:e3:78:e9:62:2e:35:b2:7b:15:22:a2:43:d6:
         b8:94:a7:ba:ce:17:45:2a:44:85:43:d5:1f:f9:9e:8f:dd:03:
         99:49:88:65:af:e6:87:b6:b3:b9:f4:56:25:07:42:36:e1:89:
         48:0c:67:60:d9:41:6a:77:37:33:88:a1:7d:30:f6:54:e9:4d:
         ef:15:d1:65:d4:ff:36:21:bb:50:47:bb:ac:24:4e:c7:f5:e0:
         7e:dd:99:48:cf:a8:e2:18:d5:40:d1:e2:d9:cd:ca:f9:f7:7e:
         f4:47:e6:d0:84:c0:38:02:52:0a:91:ef:80:81:74:be:18:0d:
         ce:55:cf:f1:73:13:1a:82:bc:3a:f9:fe:b3:e4:c9:58:20:f9:
         52:3c:21:5d:59:82:c7:ba:7a:92:94:e6:ae:36:bb:78:c5:86:
         07:f0:dd:51:7e:f1:ee:e6:e1:82:7f:10:5e:fa:f3:64:ac:4b:
         b5:74:a4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:10 2025 by rpki-client